 PC Advice
|
|
|
 |
CWS Cool Web Search |
CoolWebSearch, a BHO, is a form of malware that includes adware in its arsenal of tricks. A BHO is also known as a Browser Hijack Object, and it is an extremely aggressive application. It is fully capable of force installation when a user visits an affiliated website.
CoolWebSearch is programmed to start up each and every time that the computer starts up. It is capable of doing this through a program that it installs onto your computer. The program enables the hijacked settings to begin running as the computer boots up.
CoolWebSearch can redirect your Internet browser to the websites of its affiliates. Holding your browser hostage, CoolWebSearch can redirect any of the searches for which you have incorrectly typed the URL. Moreover, CoolWebSearch often generates pop up messages that are pornographic in nature. Additionally, it will redirect searches to websites that have pornographic content.
CoolWebSearch is capable of connecting to the Internet on its own, usurping extensive amounts of bandwidth. In turn, your computer may become sluggish as the bandwidth available for your usage diminishes. In fact, the more adware and spyware that CoolWebSearch installs onto your computer, the more bandwidth that is taken hostage by these programs. Moreover, the safety and security of your computer system is at risk with the presence of these undesirable programs.
CoolWebSearch has over fifty insidious variants to date. Among them are: CoolWebSearch/MSInfo, CoolWebSearch/MSSPI, CoolWebSearch/SvcHost, CoolWebSearch/PnP, and CoolWebSearch/DNSRelay.
To remove CoolWebSearch manually, you can follow these instructions. It is important that you back up your files just in case something goes wrong. Whenever using the registry editor, it is possible to make a mistake and delete the wrong files, especially since they often look similar.
When deleting files or keys that begin with HKEY, you will use a different set of steps. Use the following set of instructions when deleting the files beginning with HKEY included in the subsequent list.
- Click Start
- Click Run
- Type 'regedit'
- Click ok to open the registry editor, referred to as regedit.
- Click my computer at the top of the box
- Follow the path given in each value, clicking each folder open to locate the next item in the path until you have reached the last item. Once you have gotten to the last item, you can delete it. Each slash indicates a new folder.
CoolWebSearch registry values:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\policies\Explorer\RunImage
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\ CurrentVersion\RunServices\Image.
Use the following set of instructions to locate and delete the CoolWebSearch files listed below.
- Click Start.
- Click Run.
- Type 'regedit'.
- Click ok to open the registry editor, referred to as regedit.
- Click my computer at the top of the box.
- Click edit.
- Click find.
- Type in the one of the keys or files in the following lists, and click find or find next. Begin with the ones that do not start with HKEY, since these are more easily discovered and deleted. Make sure that the box is checked in front of keys, values, and data, so that the regedit looks in the correct places. Regedit should locate a key for you. Right click on the key and delete it by clicking delete in the menu that appeared or on the keyboard.
- You will do this one file at a time. After you delete each one, hit the F3 key on your keyboard to reopen the find next box. Continue the process and delete additional bad registry files.
- Once regedit indicates that the search is finished, you should click on my computer in the regedit and redo the search to guarantee that you have deleted all possible bad files from this program.
- Close the registry editor.
CoolWebSearch files:
- services:exe
- DownloaderEXE.exe
- tmksrvu.exe
- iekp32.dll
- image.dll
- mshp.dll
- mslq32.dll
- mssearch.dll
- xplugin.dll
- SexDownloader.cab
- Update911.js
- DNLDC.ocx
Use the above set of instructions to locate and delete the CoolWebSearch DLL files listed here:
- iekp32.dll
- image.dll
- mshp.dll
- mslq32.dll
- mssearch.dll
- xplugin.dll
Complete the following set of instructions to locate and remove the CoolWebSearch processes.
- Click Start.
- Click Search.
- Click for files or folders.
- Type in the name of the file, one at a time, from the following list of CoolWebSearch processes.
- Click search.
- Delete the found files.
CoolWebSearch processes:
- services:exe
- DownloaderEXE.exe
- tmksrvu.exe
Once you have succeeded in removing CoolWebSearch, it is important to scan periodically to see if this program or any spyware, malware, or adware has become entrenched onto your computer.
|
|
|
Free Scan
|
Having trouble removing spyware or adware yourself? XoftSpySE will automatically detect and remove these threats from your system.
XoftSpySE has one of the largest spyware definition databases on the Internet with over 225,000 malicious entries.
|
|
